Skip to content

Commit

Permalink
Change user to root
Browse files Browse the repository at this point in the history
  • Loading branch information
kshitijrajsharma committed Dec 5, 2023
1 parent 64ccb7b commit 7e25a5c
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 8 deletions.
3 changes: 2 additions & 1 deletion .github/workflows/docker-image-push.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ on:
branches:
- master
- develop
- dockerfile/root
# Defines two custom environment variables for the workflow. These are used for the Container registry domain, and a name for the Docker image that this workflow builds.
env:
REGISTRY: ghcr.io
Expand All @@ -20,7 +21,7 @@ jobs:
permissions:
contents: read
packages: write
#
#
steps:
- name: Checkout repository
uses: actions/checkout@v4
Expand Down
14 changes: 7 additions & 7 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -26,11 +26,11 @@ RUN pip install --user --no-cache-dir --upgrade pip \
&& pip install --user --no-cache-dir -e .

FROM base as runner
WORKDIR /home/appuser
WORKDIR /home/root
ENV PIP_NO_CACHE_DIR=1
ENV PYTHONUNBUFFERED=1
ENV PATH="/home/appuser/.local/bin:$PATH"
ENV PYTHON_LIB="/home/appuser/.local/lib/python$PYTHON_VERSION/site-packages"
ENV PATH="/home/root/.local/bin:$PATH"
ENV PYTHON_LIB="/home/root/.local/lib/python$PYTHON_VERSION/site-packages"

RUN apt-get update \
&& apt-get -y upgrade \
Expand All @@ -39,7 +39,7 @@ RUN apt-get update \
&& apt-get clean \
&& rm -rf /var/lib/apt/lists/*

COPY --from=builder /root/.local /home/appuser/.local
COPY --from=builder /root/.local /home/root/.local
COPY README.md .
COPY config.txt.sample ./config.txt
COPY setup.py .
Expand All @@ -54,10 +54,10 @@ FROM runner as prod
COPY --from=tippecanoe-builder /usr/local/bin/tippecanoe* /usr/local/bin/
COPY --from=tippecanoe-builder /usr/local/bin/tile-join /usr/local/bin/

RUN useradd --system --uid 900 --home-dir /home/appuser --shell /bin/false appuser \
&& chown -R appuser:appuser /home/appuser
RUN useradd --system --uid 900 --home-dir /home/root --shell /bin/false root \
&& chown -R root:root /home/root

USER appuser
USER root

# CMD ["/bin/bash"]
CMD ["uvicorn", "API.main:app", "--reload", "--host", "0.0.0.0", "--port", "8000", "--no-use-colors", "--proxy-headers"]

0 comments on commit 7e25a5c

Please sign in to comment.